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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims : 

1 . (Currently amended) A consumable authentication protocol for validating the 
authenticity of an untrusted authentication chip contained within a consumable, the protocol 
includ e s comprising t he steps of: 

generating an original random number in a trusted authentication chip; 

applying, in a trusted authentication chip contained within a consuming device, an 
asymmetric encrypt function to the original random number using a first key from the trusted 
authentication chip to produce a first encrypted outcome; 

passing the first encrypted outcome to the untrusted authentication chip; 

decrypting, in the untrusted authentication chip, the first encrypted outcome with an 
asymmetric decrypt function using a second secret key from the untrusted authentication chip to 
produce a first decrypted outcome; 

applying, in the untrusted authentication chip, an asymmetric encrypt function to the first 
decrypted outcome together with an original data message read from the untrusted 
authentication chip using the second secret key to produce a second encrypted outcome; 

passing the second encrypted outcome together with the original data message to the 
trusted authentication chip; 

decrypting, in the trusted authentication chip, the second encrypted outcome with an 
asymmetric decrypt function using the first key to produce a decrypted random number and a 
decrypted data message; 

comparing the decrypted random number and the decrypted data message with the 
original random number and the received original data message, without knowledge of the 
second secret key; and, 

in the event of a match, considering the consumable to be untrust e d chip and tho data 



otherwise considering the consumable to be untrusted chip and th e data moosag e- to -be 
invalid and thereby restricting the consumption of the consumable bv the consuming ; device. 
2. (Original) A consumable authentication protocol according to claim 1, for validating the 
authenticity of an untrusted authentication chip, as well as ensuring that the authentication chip, 
lasts only as long as the consumable including the further steps of writing new data to the 
untrusted chip, performing the steps of claim 1, and in the event the untrusted chip is found to 
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-vali d and allowing the consumption of the consumable by the con suming device: 
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be authentic and the new data is the same as the data message read from the untrusted chip, then 
the write is validated. 

3. (Original) A consumable authentication protocol according to claim 1 , where the first 
key is a public key. 

4. (Original) A consumable authentication protocol according to claim 1, where encryption 
outside the untrusted chip is implemented in software. 

5. (Original) A consumable authentication protocol according to claim 4, where the random 
number generation, encryption, passing, and final decrypting and comparing steps take place in 
an external system. 

6. (Original) A consumable authentication protocol according to claim 5, where the 
external system is in a printer or other device in which consumables such as ink cartridges are 
mounted. 

7. (Cancelled) 

8. (Original) A consumable authentication protocol according to claim 1, where the 
encryption outside the untrusted chip is implemented in a second authentication chip, and an 
external system intermediates between the two chips. 

9. (Original) A consumable authentication protocol according to claim 8, where the second 
authentication chip and system are in a printer or other device in which consumables are 
mounted. 

10. (Cancelled) 

1 1 . (Original) A consumable authentication protocol according to claim 1 , where the secret 
key is held only by the untrusted chip. 

12. (Original) A consumable authentication protocol according to claim 1, where the trusted 
authentication chip contains a random function to produce random numbers from a seed, and the 
function advances after every successful authentication so that the next random number will be 
produced from a different seed. 

13. (Original) A consumable authentication protocol according to claim 1, where the data 
message is a memory vector of the authentication chip, a part is different for each chip, and parts 
of it are constant (read only) for each consumable, or decrement only so that it can be completely 
downcounted only once for each consumable. 

14. (Currently amended) A consumable authentication system for validating the authenticity of 
an untrusted authentication chip, where the system comprises: 

a consuming device containing a trusted authentication chip; 

a random number generator to generate an original random number in the trusted 
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authentication chip; 

an asymmetric encryptor to encrypt the generated original random number with an 
asymmetric encryption function to produce a first encrypted outcome using a first key for the 
encryptor; 

a consumable containing the untrusted authentication chip which includes comprises a read 
function which operates to decrypt the first encrypted outcome using a second secret key and 
produce a first decrypted outcome, then applies the symmetric encrypt function to the first 
decrypted outcome together with an original data message read using the second secret key to 
produce a second encrypted outcome, also returning the second encrypted outcome together with 
the original data message; and, 

a test function, the test function operating to decrypt the second encrypted outcome using 
the first key to produce a decrypted random number and a decrypted data message, and compare 
the decrypted random number and decrypted data message with the generated original random 
number and the received original data message, without knowledge of the second secret key; 

whereby, in the event of a match the test function returns a value indicating the consumable 
to be and allowing consumption of the consumable by the consuming device v alidly, otherwise 
the test function returns a value indicating involidit v tfae consumable is invalid and thereby 
restricting the consumption of the consumable bv the consuming device . 
15. (Original) A consumable authentication system according to claim 14, where new data 
written to the untrusted chip is considered valid in the event the untrusted chip is found to be 
authentic and the new data is the same as the data message read from the untrusted chip. 
16* (Original) A consumable authentication system according to claim 14, where the first 
key is a public key. 

17. (Original) A consumable authentication system according to claim 14> where encryption 
outside the untrusted chip is implemented in software. 

1 8. (Original) A consumable authentication system according to claim 1 7, where the random 
number generation, encryption, passing, and final decrypting and comparing steps take place in 
an external system. 

1 9. (Original) A consumable authentication system according to claim 1 8, where the 
external system is in a printer or other device in which consumables such as ink cartridges are 
mounted, 

20. (Cancelled) 



PAGE 6/13 * RCVD AT 3/1212006 6:12:28 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-6/38 * DNIS:2738300 * CSID:0295557762 ' DURATION (mm-ss):06-30 



13. MAR. 2006 10:16 0295557762 SBR #1288 P. 007 /013 

Appln No. 09/517.608 
Amdt, Dated March 9, 2006 

Response to Office Action of January 1 7, 2006 5 

21. (Original) A consumable authentication system according to claim 14, where the 
encryption outside the untrusted chip is implemented in a second authentication chip, and an 
external system intermediates between the two chips. 

22. (Original) A consumable authentication system according to claim 21, where the second 
authentication chip and system are in a printer or other device in which consumables are 
mounted. 

23. (Cancelled) 

24. (Original) A consumable authentication system according to claim 14, where the secret 
key is held only by the untrusted chip. 

25. (Original) A consumable authentication system according to claim 14, where the random 
number generator of the trusted authentication chip contains a random function to produce random 
numbers from a seed, and the function advances after every successful authentication so that the 
next random number will be produced from a new seed. 

26. (Original) A consumable authentication system according to claim 25 where for a group of 
authentication chips, the initial seed for each chip is different from that of the others in the group 
so that the first random number produced by each chip in the group will be different 

27. (Original) A consumable authentication system according to claim 14, where the data 
message is a memory vector of the authentication chip, a part is different for each chip, and parts 
of it are constant (read only) for each consumable, or decrement only so that it can be completely 
downcounted only once for each consumable. 

28. CNew} A validation system according to claim 7. wherein the untrus ted chip comprises of 
an electronic noise generator to generate electronic nose to restrict detection of processing 
performed within the untrusted chip. 

29. fNew) A validation system according to claim 1 8, wherein the untrusted chip commises of 
a light emitting component operablv connected to the electronic noise generator to randomly emit 
light to restrict detection of processing performed within the untrusted chin. 
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